Privacy Policy Of NAFED

1. Privacy Notice
This privacy policy is aimed and intended to provide the users of the Website i.e., www.nafed-india.com and registered members (‘Users’, ‘you’, ‘your’) with information in relation to the online practices pursued by NAFED especially with respect to the personal information provided by the Users/registered members on the Website.

2. Information that we collect about you
2.1. General
The Website may collect personal and non-personal information about the Users. Such information and data may be collected on the basis of the information that you provide while using or accessing Website or collected using technologies as more particularly set out in this Privacy Policy.
Please note that the access and use of the Website is restricted for persons above the age of 18 only. Our Website and services are not intended for minors or person below the age of 18 years and NAFED does not target any of its services to them. NAFED does not knowingly collect Personal Information from minors or persons below the age of 18 years. If you are under the age of 18, please do not access or use the Website or otherwise register on the Website and do not provide us with any Personal Information.
2.2. Personal Information
“Personal Information” means any information that relates to a natural person, which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, is capable of identifying such person.

2.3. Aggregated Information/data
We may collect, use and share aggregated data such as statistical or demographic data for any purpose. “Aggregated data” may be derived from your Personal Information but may not be considered as Personal Information in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific feature on the Website. However, if we combine or connect aggregated data with your Personal Information so that it can directly or indirectly identify you, we treat the combined data as Personal Information which will be used in accordance with this Privacy Policy.

3. Collection of Personal Information
3.1. When you provide the Personal Information
Personal Information may be collected when you voluntarily provide it while accessing or using this Website. This includes, but is not limited to:
● Submitting forms, feedback, queries, or complaints;
● Communicating with NAFED through email, contact forms, or any other digital interface; or
● Participating in surveys, assessments, or user-interaction features.
The Personal Information provided by you is processed strictly for the purpose for which it is collected, in accordance with the Digital Personal Data Protection (DPDP) Act, 2023, and shall not be used for any unrelated purpose without your explicit consent.
NAFED will collect the following personal information from its users for the purpose of tender (view/download only) related services:
● Name,
● Email ID, and
● Phone Number.

3.2. Collection of data through Automated Technologies
While the Website does not generally collect information through automated means, however, please note that the (a) IP address of the computer from which you have accessed the Website and (b) transactional and historical usage data of a User is collected by the Website when you access or use the Website. The IP address is collected to validate credentials of a User and to ensure that any data provided is not fabricated or manipulated by a third party. The transactional and historical usage data is used primarily to analyze a User’s behavior and to improve the services provided on the Website.

4. Use and disclosure of data collected on the Website
4.1. Personal Information
(a) We will use and disclose your Personal Information strictly for purposes connected with the activities of the Website or as permitted under this Privacy Policy, the Terms of Use, and the provisions of the Digital Personal Data Protection (DPDP) Act, 2023. Such purposes shall include, but are not limited to:
(i) Compliance with Legal, Statutory, or Regulatory Requirements
Use or disclosure of Personal Information for:
• Meeting any applicable law, rule, regulation, or governmental requirement
• Responding to directives from law enforcement or regulatory authorities
• Complying with court orders, legal processes, directions, or audits
(ii) Data Analytics and Service Enhancement
We may process the information for:
• Conducting aggregated and anonymized data analytics
• Creating internal databases for service improvement
• Enhancing search functionality and navigation
• Understanding user behaviour, usage patterns, and user preferences
• Building and improving on models
• Improving website performance, user experience, and service delivery
All analytics are performed without identifying individual users, except where explicitly permitted by law or with user consent (as required for analytics tracking under DPDP Act).
(iii) Operational and Functional Requirements**
Use and disclosure of Personal Information may be necessary for:
• Providing services available on the Website or features requested by the User
• Products or services offered by our partners and affiliates, usage related communication, information on service requests
• Verifying identity for specific digital services
• Responding to User queries, feedback, or requests
• Communicating updates, acknowledgments, or alerts related to website activities
• undertaking promotions, communications, newsletters and communicating other industry specific value added data with the Users.
(iv) Engagement of Service Providers or Technical Partners
Personal Information may be shared with:
• Authorized service providers
• IT vendors
• Cloud hosting partners
• Analytics or security providers
Such sharing is strictly on a need-to-know basis and governed by appropriate agreements ensuring compliance with DPDP Act, 2023. Service providers are bound not to store, process, use, or disclose information beyond the agreed purpose and period.
(v) Security, Monitoring, and Fraud Prevention
Personal Information may be used for:
• Monitoring website performance and preventing its misuse
• Detecting and preventing security incidents, cyber threats, fraud, or unauthorized access
• Maintaining the security and integrity of website systems
(vi) Consent-Based Processing (DPDP Requirement)
Where required under the DPDP Act 2023, certain types of Personal Information will be used or disclosed only after obtaining explicit consent, such as:
• Non-essential analytics tracking
• Optional user services
• Communication subscriptions
Users retain the right to withdraw consent at any time.
(vii) Cross-Border Data Transfer (If Applicable)
If any processing involves transfer of data outside India, such transfer will only occur:
• As permitted under DPDP Act and applicable rules
• With adequate security safeguards
• With proper disclosure to the user
 
These countries may have different data protection laws, and Your Personal Information may be accessed or disclosed to governmental, regulatory, or other authorities as required by local law or official processes.
(b) Except as provided under this Privacy Policy document, we do not disclose any Personal Information or sell, rent, lease, license the use of any Personal Information which is collected on the Website. We disclose personal information to:
(i) Service providers providing services on the Website. These may include (A) Website maintenance and support service providers. These agents and contractors are only allowed to use the information shared with them for the specific tasks we have requested them to do and consistent with this Privacy Policy, and for no other purposes. Illustratively, we disclose your mobile number and email address to service providers who generate OTP at the time of sign up, registration and login.
(ii) Use and disclosure of the information for compliance with the Holiday Listing Policy and other internal policies of NAFED.
(iii) Payment Systems: Your information may be disclosed to payment systems providers for processing of payments (if any) on the Website.
(iv) Legal Disclosures: We may disclose your Personal information as required or permitted by law and/or for legal proceedings or to comply with a judicial proceeding, court order, or legal process or Government directions/regulations. We take suitable actions to limit the extent of such disclosure to only comply with any specific legal requirements.
(v) Business Transfers: In the event of any merger, investment in or acquisition of NAFED or its assets or part thereof, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, we may disclose or otherwise transfer information about our Users, including Personal Data, to an acquirer, successor, or assignee.
(c) Available log records and all data stored on our servers may be accessed by our system administrators for technical purposes only with the use of licensed tools.

4.2. Non-Personal Information or Aggregated Information
(a) As stated above, Non-Personal Information and Aggregated Information is collected and prepared after removing any personal identifiers which may directly or indirectly associate with the user.
(b) Such Non-Personal Information or Aggregated Information may be utilized for assessing and analyzing the efficacy of the Services offered on the Website, offering E-auction services for other divisions and departments presently not on the Website, whether or not connected with the services offered on the Website and for general business or marketing purposes. We share aggregated, automatically-collected or otherwise non-personal information with third parties. We may utilize, share and disclose such Non-Personal Information / Aggregated Data for various purposes, including (i) compliance with reporting obligations; (ii) for business or marketing purposes; (iii) to assist us and other parties in understanding our Users’ interests, habits and usage patterns for certain programs, content, services, advertisements, promotions and/or functionality available through the Website including search engine optimization and search engine management services provided by search engines like Google which help improve the visibility of the Website by analyzing behavior and pattern of Users accessing and visiting the Website whether with, or without, registering or logging in to the Website.
(c) However, we ensure that while disclosing such Non-Personal Information, any personal identifiers are removed or encrypted using appropriate technical practices and technology to prevent an identification of the person whose information is being used.

5. Log Files
Like most standard software application servers, we use log files. This includes IP (internet protocol) addresses, browser type, ISP (internet service provider), referring / exit pages, Website type, date / time stamp and number of clicks to analyze trends, administer the Website, track User's movement in the aggregate, and gather broad demographic information for aggregate use. IP addresses, etc. are not linked to personally identifiable information. The same may be used to track the behavior of the Users or identify the area of interest of the Users, which might further be useful for advertisement, promotions etc.

6. Contact Us
The “Contact Us” feature available on the Website may require you to provide information pertaining to the nature of issue or query which you may raise. While usually no additional personal information is required to enable NAFED to provide support services, NAFED may require you to provide certain personal information to enable the resolution of the queries. Such personal information, if provided, shall be used solely for resolution of the issues or queries raised and otherwise in accordance with the terms herein.

7. Data Retention
We will only keep your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. This means, for instance, that we will retain your Personal Information for as long as you use the Website or services and for such further period as may be required for ensuring compliance with applicable laws. Once you decide to terminate your use of the Website, we will delete or anonymize your Personal Information within a reasonable timeframe, unless we are required to retain it for other reasons including prescribed retention under applicable laws, audit or taxation purposes, legal disputes etc.

8. Changes in this Privacy Policy
NAFED reserves the right to change this policy from time to time, at its sole discretion. We may update this privacy policy to reflect changes to our information practices. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy on the home page, and other places we deem appropriate, we may also elect to send users a notice of any changes via e-mail. Your use of the Website after such notice shall be deemed as acceptance of such changes to this Privacy Policy. Please check back frequently to see any updates or changes to this Privacy Policy.

9. Communications: For any clarifications on this privacy policy users can send an email to: itsection@nafed-india.com.

10. Data Protection Officer: As required under the Digital Personal Data Protection Act, 2023, NAFED has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance and addressing user grievances. Contact: dpo@nafed-india.com.

11. User Rights: In accordance with law,
a) As a User, You have the right to access, correct, update, or delete Your personal data held by NAFED.
b) You may withdraw Your consent for data processing at any time, except where retention is required by law.
c) You also have the right to raise grievances about our handling of Your Personal Information.
d) To exercise any of these rights or submit a complaint, please contact our Data Protection Officer at: [Grievance officer/ DPO’s email].

12. Security
a) NAFED has placed reasonable technical, organizational, administrative and physical controls to prevent possible unauthorized or unlawful access to or accidental loss of or destruction or damage to your information. We also ensure that our security practices are updated at regular intervals to maintain compliance with applicable laws.
b) In the event of a breach of Personal Information, we will promptly inform the affected User as required by law.

13. Disclaimers and Limitation of Liability
a) Without prejudice to anything stated herein and in addition to the disclaimers provided elsewhere in this Policy, the Users by accessing the Website and/or registering as a User on the Website specifically acknowledge and understand that whilst NAFED shall make all reasonable endeavors to protect and secure the confidentiality of the information provided by the Users, NAFED or its service partners shall not be liable in the following circumstances (please note that this is not an exhaustive list and the specification of any instances herein below shall be in addition to other defenses which may be applicable to NAFED under applicable laws):
i. Credit Fraud or other criminal offences committed by any third party with the use of credit cards/debit card etc. or other bank details provided by the members/Users which fraud or offence has been committed in spite of the reasonable security measures adopted by NAFED as part of its Website infrastructure or where such fraud or criminal offence is committed owing to negligence, acquiescence or connivance or assistance, whether voluntary or involuntary of the User or its authorized representatives. NAFED shall operate and maintain the Website in accordance with the rules set by its payment processor.
ii. Unauthorised Use (i.e. use, reproduction, distribution, disposition, or any other activity, including, without limitation, decompilation, reverse engineering, modification or disassembly etc. without the authorisation from NAFED) or Unauthorised access (access, or to attempt to access, or to penetrate, or attempt to penetrate by any third party’s computer software or electronic communications system, including, without limitation, hacking, introduction of any virus, malware, spyware, trojans, any intrusion resulting in the corruption or loss of data etc.) of the Website by a User or by any third party which may cause any loss or damage to the User or the third party where such unauthorized use or access could not be prevented despite reasonable safety precautions undertaken by NAFED.

14. Use of Cookies and Other Automated Technologies
a) The Website may use any cookies, log files, web beacons, tracking pixels and other similar technologies as part of its technical design to understand how you navigate through the Website to learn your preferences. Cookies are small text files that web servers place on your device; they are designed to store basic information and to help Website recognize your browser. Log files track actions that occur on the Website, and collect data including your IP address, browser type, internet service provider, referring and exit pages, and date and time stamps. Web beacons, tags and pixels are electronic files used to record information about how you browse the Website.
b) Users can choose to accept or decline cookies through the browser settings. If the visitor chooses to disable cookies, some portions of this website may not function properly.
c) Any continued access or use of the Website by a User will imply its acceptance to such revised policy.

Last Updated on: 24.12.2025